CVE Catalog
CVE-2017-10930
CriticalSummary
The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource, allowing ordinary users to download configuration files. This can lead to the theft of sensitive information such as administrator accounts and passwords.
Risk Assessment
The organization may be exposed to sensitive data leaks, potentially leading to unauthorized access to systems and resources.
Recommendation
It is recommended to update the device to version 3.00.40 or later to fix this security vulnerability.
Original NVD description (English source)
The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to download configuration files to steal information like administrator accounts and passwords.